Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/d59ifLeoofn7-UvWX5Z_heEmW3w.roa
File: d59ifLeoofn7-UvWX5Z_heEmW3w.roa (raw, json)
Hash identifier: myKQPKzA+B6pXm0I1iyKz0J47S4IH4zVCcxURKYGIbw=
Subject key identifier: 77:9F:62:7C:B7:A8:A1:F9:FB:F9:4B:D6:5F:96:7F:85:E1:26:5B:7C
Certificate issuer: /CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
Certificate serial: 01993CBE19FED5B260587FFA69B33D44445E
Authority key identifier: BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/d59ifLeoofn7-UvWX5Z_heEmW3w.roa
Signing time: Fri 12 Sep 2025 07:05:15 +0000
ROA not before: Fri 12 Sep 2025 07:05:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 185.180.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:be:19:fe:d5:b2:60:58:7f:fa:69:b3:3d:44:44:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
Validity
Not Before: Sep 12 07:05:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=779f627cb7a8a1f9fbf94bd65f967f85e1265b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:c4:66:89:23:30:c4:07:2b:5f:c6:14:f1:
9b:ab:f0:f1:ca:14:f4:4e:17:7d:ec:98:32:1e:69:
6a:1b:9c:52:37:e3:6e:cb:7a:26:2e:1a:e9:41:ba:
6d:ec:d5:c2:cd:95:15:ba:b6:2f:d2:cf:bb:49:9c:
a6:7c:e0:c2:a7:6b:17:a7:68:8b:e9:73:f9:ae:be:
ab:3d:89:b2:0c:b8:9b:a8:3c:fb:40:e1:76:25:a1:
28:26:f6:75:76:d0:78:b4:55:fd:fe:80:c0:df:d9:
58:90:3e:d1:11:19:dc:a1:99:cd:d5:fc:7f:13:aa:
65:25:0d:a9:69:fc:15:de:bf:68:c4:d3:a4:a3:b1:
05:3b:fc:bc:80:7d:17:1a:3f:17:0e:eb:2f:5d:23:
f9:9d:af:99:a0:60:55:2e:09:72:4b:04:bb:d7:e8:
a7:17:72:cb:79:ff:1b:e1:7d:31:87:4f:09:cf:83:
29:cc:cd:53:7c:41:67:37:2d:1a:26:c1:df:ca:b5:
d2:55:5c:a1:1d:af:73:62:d1:eb:76:95:6b:0a:64:
5e:2b:30:90:a3:9d:b0:6d:4e:ca:bb:36:55:09:e9:
1a:b7:a5:34:58:ad:10:fd:9f:4a:e2:66:74:3c:45:
49:49:fc:eb:6c:c2:fe:64:05:11:76:f8:7d:5e:5f:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:62:7C:B7:A8:A1:F9:FB:F9:4B:D6:5F:96:7F:85:E1:26:5B:7C
X509v3 Authority Key Identifier:
keyid:BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/d59ifLeoofn7-UvWX5Z_heEmW3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.72.0/22
Signature Algorithm: sha256WithRSAEncryption
79:10:b7:d3:7e:4e:62:f2:8d:fa:50:59:33:56:de:d6:56:34:
ec:67:51:6a:d6:21:c5:c6:63:ca:d9:02:47:d5:04:57:6f:70:
19:1e:06:f9:07:e5:79:32:ba:fc:5b:8d:4a:ee:3f:11:9a:0d:
a2:62:3f:04:ec:ab:f1:a0:70:5b:b3:5f:65:ed:ee:ef:0b:45:
94:8f:37:20:22:2d:4a:8b:46:65:6e:39:68:04:24:d1:79:10:
92:b4:99:65:00:42:3b:4f:dd:8e:c8:d2:16:88:8c:0f:e8:f4:
d2:2e:7d:7c:cc:74:9e:25:bd:00:2c:0b:78:98:32:e7:c5:75:
65:99:12:bc:4a:e2:7c:c1:a3:c1:1e:50:c9:72:05:f5:fe:10:
8d:09:09:22:46:24:14:e6:8b:e5:c1:53:cb:d6:56:17:db:a4:
65:61:2f:a6:d2:d4:12:d3:5a:08:4c:73:f3:6d:ab:7c:e1:af:
f6:17:5a:cb:25:47:24:a2:c8:19:83:3b:dc:b7:33:16:b0:15:
6d:cf:6a:ff:ec:45:c2:ad:e5:d3:23:c1:6b:fc:65:12:8e:d7:
69:59:79:8a:47:64:c7:16:d0:a7:8c:8b:bc:46:e9:18:20:a3:
39:bb:1e:e5:af:db:12:7d:10:21:5c:4b:94:7f:9d:a2:81:6a:
48:fd:4a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:12 2025 by rpki-client